The recent data breach at Shwapno is a serious reminder that no organization is immune to cyber threats. With reports indicating that 4 million customer records have been compromised after a failed 1.5 million dollar ransom attempt, the focus now shifts to consumer protection and corporate accountability.
Here’s how to lock the doors before the next disaster:
1. Encryption for all customer data. This turns customer data into a random string of gibberish.
2. Every employee or developer trying to access the database should be required to use Multi-Factor Authentication (MFA)
3. The database should never be directly connected to the internet. It should sit in a Private Subnet.
4. The system should notice if someone tries to download 4 million rows of data at once.
5. Hire a Cyber Security Engineer to find "bugs" or open "backdoors".